Is CVE-2014-2127 being actively exploited?

CVE-2014-2127 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-2127?

CVE-2014-2127 has a CVSS 2.0 base score of 8.5 (HIGH).

CVE-2014-2127

HIGH · CVSS 8.5EPSS 11.5%EU EUVD

Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099.

Key facts

CVSS score: 8.5 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Weakness (CWE): CWE-20
EPSS score: 11.5% (96th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-2167)
Published: April 10, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-2167 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software
cisco / adaptive security appliance software

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Cisco Adaptive Security Appliances Version: ASA software version 9.1(2) Components: ASA 5500 (5505, 5510, 5520, 5540, 5550, 5580-20-40), ASA 5500-X Series (5512-X, 5515-X, 5525-X, 5545-X, 5555-X), ASA 5585-X (5585-10, 5585-20, 5585-40, 5585-60), ASA Services Module (ASA-SM) - Cisco Systems, Inc. - Common Criteria Certificate Number: 2013/86 - archived

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-asa(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain